See how a hack can reveal the password of a home Wi-Fi network injust three simple steps! All you need is a smartphone and a screwdriver.
You would never expect to hear that your doorbell could reveal WiFi … But if you like to fill your home with IoT devices, then you should be prepared for something like this.
Ring is a modern IoT doorbell that connects to the home Wi-Fi system, allowing the owner to see who is at the door of their home via their mobile phone.
The user can even open the door through the device, but this function also requires the installation of a special locking system on the door frame.
Pen Test Partners, a company specializing in IoT device security testing, tested the doorbell in question and discovered a flaw that reveals the password of the Wi-Fi it is connected to.
As the researchers explain, the doorbell is mounted on the outside of the house and can be easily removed from the wall by simply unscrewing two screws. On its back, there is an orange button that, when pressed, puts the doorbell's wireless connection module into AP (Access Point) mode.
By simply pressing the button and accessing a link, you get the Wi-Fi password and thus simply become a hacker!
You can then connect your smartphone to the webserver of Gainspan, the company that manufactures the doorbell's wifi module, through a special URL.
Once access is gained, this URL can be used to reveal the device's configuration file, along with the SSID and PSK (Pre-Shared Key) of the home network in cleartext.
All that's left for an intruder now is to place the doorbell back on the outside wall of the house and disappear.
As is clear, the risks posed by IoT devices are many, which is why users should conduct thorough market research before prematurely acquiring any IoT device.
